diff --git a/pkgs/os-specific/linux/pam_login/default.nix b/pkgs/os-specific/linux/pam_login/default.nix
index 724e316a15a..f1d2eb6bc44 100644
--- a/pkgs/os-specific/linux/pam_login/default.nix
+++ b/pkgs/os-specific/linux/pam_login/default.nix
@@ -8,6 +8,8 @@ stdenv.mkDerivation {
     sha256 = "1w2hpwjhmwjhf8rg789xpl0hibahqlr3ccivfy3m4kgrm5gf04kv";
   };
 
+  patches = [ ./sys-stat-h.patch ];
+
   # To overcome a gcc 4.4 warning:
   # "#ident is a deprecated GCC extension"
   patchPhase = ''
diff --git a/pkgs/os-specific/linux/pam_login/sys-stat-h.patch b/pkgs/os-specific/linux/pam_login/sys-stat-h.patch
new file mode 100644
index 00000000000..163fd7ce8e2
--- /dev/null
+++ b/pkgs/os-specific/linux/pam_login/sys-stat-h.patch
@@ -0,0 +1,12 @@
+Include the needed <sys/stat.h> since recent glibc is stricter about that.
+
+--- pam_login-3.35/src/login.c~	2007-05-04 14:07:49.000000000 +0200
++++ pam_login-3.35/src/login.c	2010-04-27 11:38:13.000000000 +0200
+@@ -47,6 +47,7 @@
+ #include <signal.h>
+ #include <stdio.h>
+ #include <string.h>
++#include <sys/stat.h>
+ #include <sys/ioctl.h>
+ #include <sys/param.h>
+ #include <sys/resource.h>